Vulnerability GO-2026-6776
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
5 hours ago
October 19, 2026 at 09:08 PM UTC
KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication in github.com/kedacore/keda
v1.0.0 - v1.5.0
v1.0.0 - v1.5.0
Summary
KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication in github.com/kedacore/keda
Details
KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication in github.com/kedacore/keda
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Critical
4 days ago
KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication
v2.0.0-beta - v2.20.2 GHSA-637c-6jxx-4rwm
v2.0.0-beta - v2.20.2 GHSA-637c-6jxx-4rwm
Critical
4 days ago
KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication
v2.0.0-beta - v2.20.2 GHSA-637c-6jxx-4rwm
v2.0.0-beta - v2.20.2 GHSA-637c-6jxx-4rwm
Unknown
3 months ago
KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping in github.com/kedacore/keda
v2.0.0-beta - v2.19.0 GO-2026-5940
v2.0.0-beta - v2.19.0 GO-2026-5940
Unknown
3 months ago
KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping in github.com/kedacore/keda
v2.0.0-beta - v2.19.0 GO-2026-5940
v2.0.0-beta - v2.19.0 GO-2026-5940
Medium Risk
3 months ago
KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping
v2.0.0-beta - v2.19.0 GHSA-6w3m-4hhp-775q
v2.0.0-beta - v2.19.0 GHSA-6w3m-4hhp-775q
Impacted packages
Timeline
Published
5 hours ago
October 19, 2026 at 09:08 PM UTC
Fixed (v2.21.0)
26 days ago
September 23, 2026 at 03:57 PM UTC
Last Modified
4 hours ago
October 19, 2026 at 09:31 PM UTC